The IDEA encryption plug-in for BO2k version 0.3 has a flaw which causes any password to generate the same key.